nxp vulnerabilities

Recent CVEs affecting nxp products. 18 tracked.

nxp has 18 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-10-17. Highest priority: CVE-2019-14237 (score 66/100).

CVE-2023-39902 HIGH 7.0 UPGRADE A software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before 2023.07 on se
CVE-2022-45163 MEDIUM 5.3 MITIGATE MITIGATE An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protoc
CVE-2022-22819 HIGH 7.8 MITIGATE MITIGATE NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontro
CVE-2021-44479 MEDIUM 6.1 MITIGATE NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request duri
CVE-2021-40154 MEDIUM 6.1 MITIGATE MITIGATE NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configu
CVE-2021-3011 MEDIUM 4.2 MITIGATE MITIGATE An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A
CVE-2021-38260 HIGH 7.8 DOWNGRADE NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostParseDeviceConfi
CVE-2021-38258 HIGH 7.8 DOWNGRADE NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USB_HostProcessCallback(
CVE-2021-33881 MEDIUM 4.2 MITIGATE MITIGATE On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off"
CVE-2021-31532 MEDIUM 6.8 MITIGATE MITIGATE NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0)
CVE-2021-27421 HIGH 7.3 UPGRADE NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which co
CVE-2021-22680 HIGH 7.3 UPGRADE NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition fu
CVE-2019-17519 HIGH 8.8 UPGRADE The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict
CVE-2019-17060 MEDIUM 6.5 UPGRADE The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetoo
CVE-2019-14239 MEDIUM 6.6 MITIGATE MITIGATE On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protect
CVE-2019-14237 CRITICAL 9.8 MITIGATE MITIGATE On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protect
CVE-2017-7936 MEDIUM 6.3 MITIGATE MITIGATE A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6
CVE-2017-7932 MEDIUM 6.0 MITIGATE MITIGATE An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual

FAQ

How do I fix nxp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is nxp being exploited right now?

None of the tracked nxp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which nxp CVE should I patch first?

CVE-2019-14237 currently ranks highest (66/100): On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protect.

Products

RSS feed for nxp · ← Back to latest CVEs